Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Is there any way to see if a user deleted a folder in a shared resource (we have Active Directory)?

I need to see if someone is removing folders or if they do actually "magically disappear".

share|improve this question

2 Answers 2

up vote 0 down vote accepted

I'm sure you should be able to audit the delete events.

In Group Policy audit for Object Access - Success.

Then at the folder you want to trigger the events, set the Audit for successful deletion of files and folders. Here is a website that talks about that.

When a file/folder is deleted, an event log entry will be made. You may have to search through the event log entries to find the specific file/folder of interest.

share|improve this answer

There's an "inspection" tab in the advanced security properties, though you need to configure group policy in addition to this.

share|improve this answer
    
How to set up this group policy? –  rkl Nov 7 '11 at 13:09
    
Unfortunately I have no idea :( –  kinokijuf Nov 7 '11 at 14:39

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.